CVE-2013-2564

Mambo CMS 4.6.5 allows remote attackers to cause a denial of service memory and bandwidth consumption by uploading a crafted file...

CVE-2013-2562

Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-2564

CVE-2013-2564 affects Mambo CMS 4.6.5 and is a remote-denial-of-service issue caused by uploading a crafted file. The vulnerability leads to memory and bandwidth consumption as described in the NVD entry. No patch/version remediation is provided in the supplied documents. If available, check offi...

CVE-2013-2562

CVE-2013-2562 concerns Mambo CMS 4.6.5, where the MySQL database password is stored in cleartext within the document root. This condition enables local users to obtain sensitive information via unspecified vectors. The available sources confirm the root cause (cleartext password exposure) and the...

CVE-2013-2563

Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file...

SMF Forum smf.php mosConfig_absolute_path Parameter PHP Code Execution - Ver2 (CVE-2006-3773)

A code execution vulnerability has been reported in Mambo Smf-forum. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Mambo Gallery Manager help.mgm.php mosConfig_absolute_path Parameter PHP Code Execution - Ver2 (CVE-2006-3980)

A code execution vulnerability has been reported in Mambo Gallery Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Mambo 4.6.4 Remote File Inclusion

!/usr/bin/env python Title: Mambo 4.6.4 mosConfigabsolutepath RFI CVE: CVE-2008-2905 Reference: http://heapoverflow.com/f0rums/advisories/6915-cve-2008-2905-mambo.html Author: infodox Site: http://insecurety.net/ Twitter: @infodox Old news, just practicin' my python :3 import requests You better...

Joomla!/Mambo FCKeditor模块'Connector'本地文件包含漏洞

Bugtraq ID:55563 Mambo / Joomla是流行的内容管理系统。 Mambo / Joomla包含的fckeditor模块不正确过滤提交给'Connector'参数的数据，可通过目录遍历序列以WEB权限查看系统文件内容。 0 mambo /joomla fckeditor 厂商解决方案 目前没有详细解决方案提供： http://www.joomla.org/ http://www.mambo-foundation.com/...

Mambo / Joomla FCKEditor Local File Inclusion

mambo /joomla fckeditor lfi Vulnerability Exploit Title :mambo /joomla fckeditor lfi Vulnerability Google Dork: /mambots/editors/fckeditor/editor/filemanager/browser/default Author: BHG Security Center Home: http://cc.black-hg.org - http://greyh4t.com/cc/ Tested on: linux+apache Finders:Siavash...

CVE-2006-7247

SQL injection vulnerability in the Weblinks comweblinks component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter...

CVE-2006-7247

CVE-2006-7247 affects the Weblinks (com_weblinks) component for Joomla! and Mambo up to version 1.0.9. The issue is an SQL injection via the title parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a high severity (CVSS v2 base score 7.5, network access, n...

Mambo CMS 4.6.5 Denial Of Service / Disclosure

Larry W. Cashdollar 1/2/2012 http://vapid.dhs.org About Mambo: "Mambo is a full-featured content management system that can be used for everything from simple websites to complex corporate applications." http://mambo-code.org 1. Clear text password/crypt: Mambo stores mysql database password in...

CVE-2011-2917

SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter...

Sql injection

SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter...

CVE-2011-2917

CVE-2011-2917 describes a SQL injection vulnerability in Mambo CMS

CVE-2011-2917

SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter...

Mambo 4.x - Zorder SQL Injection

Mambo 4.x - Zorder SQL Injection + Exploit Title : CMS 4.x.x Zorder SQL Injection Vul + Author : Kr4L BeNiM + Contact : www.facebook.com/kr4l.hacker + Date : November 13, 2011 + Software Link: http://mambo-developer.org + Category: Web Apps Vulnerability: SQL injection Vulnerability Exploit : - T...

Mambo Zorder SQL Injection

Exploit Title : CMS 4.x.x Zorder SQL Injection Vul + Author : Kr4L BeNiM + Contact : www.facebook.com/kr4l.hacker + Date : November 13, 2011 + Software Link: http://mambo-developer.org + Category: Web Apps Vulnerability: SQL injection Vulnerability Exploit : - The "zorder" parameter was not...

Mambo 4.x - 'Zorder' SQL Injection

Exploit Title : CMS 4.x.x Zorder SQL Injection Vul + Author : Kr4L BeNiM + Contact : www.facebook.com/kr4l.hacker + Date : November 13, 2011 + Software Link: http://mambo-developer.org + Category: Web Apps Vulnerability: SQL injection Vulnerability Exploit : - The "zorder" parameter was not...